This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer (raw, json) Hash identifier: q6x982HznNbd2XNLKP316gGv9/f0c6gGoJYeo5lrG3s= Subject key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA532FAC069EB5B041245EAFD41994 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202440 IP: 194.11.84.0/22 IP: 2a0f:d140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:53:2f:ac:06:9e:b5:b0:41:24:5e:af:d4:19:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:39:29:7b:ee:c5:d6:31:e4:56:88:8e:84: 5c:86:5e:3e:aa:85:7a:4e:84:3e:49:99:b9:f5:9c: 09:ab:0a:22:fa:36:1d:2a:8e:c0:e2:18:21:9d:25: 5d:a6:b5:97:7e:d7:87:f7:c9:87:3a:0d:3b:29:2a: 35:6c:44:4f:e9:b5:ee:65:1a:e2:a0:2a:2a:dd:4c: 72:72:44:c1:c7:71:ee:0d:c9:60:cc:bc:71:25:bd: af:72:5a:f7:47:a8:c3:cc:8d:99:b2:2d:6e:79:4e: 6f:94:fc:e5:3e:b8:4f:47:1a:f1:3f:e8:7b:c9:bd: e3:d9:ac:3d:8c:f1:8d:88:2e:fa:00:cf:5b:8e:ab: 70:af:3b:25:f7:1a:2b:27:1a:c5:c8:f9:b6:eb:7d: 2c:d6:31:ea:16:34:f0:86:2c:e4:25:ff:c3:b7:69: 4e:87:c8:73:6f:27:d3:43:f5:58:28:8b:5f:e7:2f: da:c5:a4:e2:eb:dd:b3:af:3e:26:7e:2e:4c:5e:e6: 42:25:a7:41:0d:f3:ba:e6:ca:51:ea:80:c2:17:30: 35:a8:69:87:57:1b:44:a3:0a:66:e3:f5:65:70:94: 5c:bf:70:14:14:97:8a:38:db:44:4a:36:59:6d:9d: 29:27:61:2a:84:51:06:7c:c7:c9:ed:ea:9b:4e:af: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.84.0/22 IPv6: 2a0f:d140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202440 Signature Algorithm: sha256WithRSAEncryption 3e:ec:4e:b1:5c:ba:a9:e5:49:d4:1c:89:2f:88:bc:16:ce:6b: f0:1d:ad:6a:05:e3:f0:24:33:91:81:c0:22:15:dc:21:c9:9c: 99:1c:73:a1:68:db:2c:35:9a:65:8d:d0:e0:e4:76:65:27:f3: c4:93:ff:bf:f8:93:84:b6:49:34:71:fd:55:2f:de:0d:b5:4f: 5d:5c:77:b8:f4:79:ac:0b:7f:59:49:1d:e1:dd:ad:29:94:56: 36:c6:9f:91:ff:17:c8:c2:0a:6f:f8:da:17:37:44:c4:c9:c0: 70:aa:57:e7:a0:ec:45:b7:0b:ad:b2:a5:91:6e:60:55:fa:51: 75:e6:18:2d:1a:36:6d:44:a2:74:f3:e9:43:6c:b5:4e:c7:0c: 51:c4:6c:3c:ea:23:43:10:c5:89:92:31:8c:4a:9d:18:33:8e: 18:03:72:a3:21:75:94:68:ed:0c:ec:c5:7e:af:7e:80:8d:ee: 1c:e8:4b:87:1c:34:86:2e:e7:6c:f7:1a:e6:5d:d5:29:f0:c4: 5b:2f:63:af:61:d2:23:fe:5f:8f:a9:f8:42:56:f5:b9:f4:60: f2:ec:b9:9f:15:0a:e3:af:3d:d2:c8:ba:bf:d5:14:8d:83:53: e1:14:ae:a1:05:0e:1f:3d:e2:d7:b3:8e:a4:aa:00:e9:ec:29: 88:33:f0:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ylMvrAaetbBBJF6v1BmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTUyZmVlOTU0MmQ2M2E2OGU0OWIyYzhlZDc4MzhmOGEwMzQ2YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJI5KXvuxdYx5FaIjoRchl4+qoV6 ToQ+SZm59ZwJqwoi+jYdKo7A4hghnSVdprWXfteH98mHOg07KSo1bERP6bXuZRri oCoq3UxyckTBx3HuDclgzLxxJb2vclr3R6jDzI2Zsi1ueU5vlPzlPrhPRxrxP+h7 yb3j2aw9jPGNiC76AM9bjqtwrzsl9xorJxrFyPm2630s1jHqFjTwhizkJf/Dt2lO h8hzbyfTQ/VYKItf5y/axaTi692zrz4mfi5MXuZCJadBDfO65spR6oDCFzA1qGmH VxtEowpm4/VlcJRcv3AUFJeKONtESjZZbZ0pJ2EqhFEGfMfJ7eqbTq9ICQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN5S/ulULWOmjkmyyO14OPigNGsIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzc2ZTNi My1hYjU1LTRhYzktYmIyOC1hNGYzMzM2NTRjYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNzZlM2Iz LWFiNTUtNGFjOS1iYjI4LWE0ZjMzMzY1NGNjOS8xLzNsTC02VlF0WTZhT1NiTEk3 WGc0LUtBMGF3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwgtUMA0EAgACMAcDBQMqD9FAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWyDANBgkqhkiG9w0BAQsFAAOCAQEAPuxOsVy6qeVJ 1ByJL4i8Fs5r8B2tagXj8CQzkYHAIhXcIcmcmRxzoWjbLDWaZY3Q4OR2ZSfzxJP/ v/iThLZJNHH9VS/eDbVPXVx3uPR5rAt/WUkd4d2tKZRWNsafkf8XyMIKb/jaFzdE xMnAcKpX56DsRbcLrbKlkW5gVfpRdeYYLRo2bUSidPPpQ2y1TscMUcRsPOojQxDF iZIxjEqdGDOOGANyoyF1lGjtDOzFfq9+gI3uHOhLhxw0hi7nbPca5l3VKfDEWy9j r2HSI/5fj6n4Qlb1ufRg8uy5nxUK46890si6v9UUjYNT4RSuoQUOHz3i17OOpKoA 6ewpiDPwHA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:11 2026 by rpki-client